IBM container type 'as secure as hypervisor'

[Chris Laprise]

They avoided comparison with bare-metal hypervisors, so I'm a trifle
skeptical...

https://www.zdnet.com/article/which-is-more-secure-containers-or-virtual-machines-the-answer-will-surprise-you/


--

Chris Laprise, tas...@posteo.net
https://github.com/tasket
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886

[Zrubi]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 07/17/2018 05:32 AM, Chris Laprise wrote:
> They avoided comparison with bare-metal hypervisors, so I'm a
> trifle skeptical...
>
> https://www.zdnet.com/article/which-is-more-secure-containers-or-virtu
>
>
al-machines-the-answer-will-surprise-you/

Comparing a bare-metal hypervisor to a container...
it's like apple and pear.

Booth are fruits, right?
Now decide which one is taste better.


- --
Zrubi
-----BEGIN PGP SIGNATURE-----
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=0qg1
-----END PGP SIGNATURE-----

[Chris Laprise]

On 07/17/2018 04:09 AM, Zrubi wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> On 07/17/2018 05:32 AM, Chris Laprise wrote:
>> They avoided comparison with bare-metal hypervisors, so I'm a
>> trifle skeptical...
>>
>> https://www.zdnet.com/article/which-is-more-secure-containers-or-virtu
>>
>>
> al-machines-the-answer-will-surprise-you/
>
> Comparing a bare-metal hypervisor to a container...
> it's like apple and pear.
>
> Booth are fruits, right?
> Now decide which one is taste better.

They're not so different when you add something like Qubes.

What IBM seems to be comparing are container-like environments, some of
which utilize KVM hypervisor while others don't.

So I think skepticism is warranted, esp. since they're making blanket,
unqualified statements about hypervisors.